@pulumi/sdwan 0.6.0-alpha.1766557813 → 0.6.0-alpha.1768016809

package/types/output.d.ts

@@ -234,10 +234,14 @@ export interface ApplicationPriorityTrafficPolicyPolicySequence {
     sequenceName?: string;
 }
 export interface ApplicationPriorityTrafficPolicyPolicySequenceAction {
+    appqoeDreOptimization?: boolean;
+    appqoeServiceNodeGroup?: string;
+    appqoeTcpOptimization?: boolean;
     /**
      * Backup SLA perferred color
      */
     backupSlaPreferredColors?: string[];
+    cflowd?: boolean;
     cloudProbe?: boolean;
     cloudSaas?: boolean;
     count?: string;
@@ -261,11 +265,16 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceAction {
     natPool?: number;
     natVpn?: boolean;
     /**
-     * - Choices: `ipAddress`, `redirectDns`
+     * - Choices: `ipAddress`, `dnsHost`
      */
     redirectDnsField?: string;
     redirectDnsValue?: string;
     secureInternetGateway?: boolean;
+    secureServiceEdge?: boolean;
+    /**
+     * - Choices: `Cisco-Secure-Access`, `zScaler`
+     */
+    secureServiceEdgeInstance?: string;
     setParameters?: outputs.ApplicationPriorityTrafficPolicyPolicySequenceActionSetParameter[];
     /**
      * slaClass
@@ -283,14 +292,14 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
      * - Choices: `ipsec`, `gre`
      */
     localTlocListEncapsulation?: string;
-    localTlocListRestrict?: string;
+    localTlocListRestrict?: boolean;
     nextHopIpv4?: string;
     nextHopIpv6?: string;
     nextHopLoose?: boolean;
     policerId?: string;
     preferredColorGroupId?: string;
-    preferredRemoteColorIds?: string[];
-    preferredRemoteColorRestrict?: string;
+    preferredRemoteColorRestrict?: boolean;
+    preferredRemoteColors?: string[];
     serviceChainFallbackToRouting?: boolean;
     serviceChainLocal?: boolean;
     serviceChainTlocColors?: string[];
@@ -308,6 +317,8 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
      * - Range: `0`-`65530`
      */
     serviceChainVpn?: number;
+    serviceLocal?: boolean;
+    serviceRestrict?: boolean;
     serviceTlocColors?: string[];
     /**
      * - Choices: `ipsec`, `gre`
@@ -319,7 +330,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
      * - Choices: `FW`, `IDS`, `IDP`, `netsvc1`, `netsvc2`, `netsvc3`, `netsvc4`, `appqoe`
      */
     serviceType?: string;
-    serviceVpn?: string;
+    /**
+     * - Range: `0`-`65530`
+     */
+    serviceVpn?: number;
     tlocColors?: string[];
     /**
      * - Choices: `ipsec`, `gre`
@@ -327,7 +341,10 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSetParamete
     tlocEncapsulation?: string;
     tlocIp?: string;
     tlocListId?: string;
-    vpn?: string;
+    /**
+     * - Range: `0`-`65530`
+     */
+    vpn?: number;
 }
 export interface ApplicationPriorityTrafficPolicyPolicySequenceActionSlaClass {
     fallbackToBestPath?: boolean;
@@ -366,10 +383,9 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
     dns?: string;
     dnsApplicationListId?: string;
     /**
-     * DSCP number
-     *   - Range: `0`-`63`
+     * DSCP numbers
      */
-    dscp?: number;
+    dscps?: number[];
     /**
      * ICMP6 Message
      */
@@ -391,8 +407,8 @@ export interface ApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
      * M365 Service Area
      */
     serviceAreas?: string[];
-    sourceDataIpv4PrefxListId?: string;
-    sourceDataIpv6PrefxListId?: string;
+    sourceDataIpv4PrefixListId?: string;
+    sourceDataIpv6PrefixListId?: string;
     /**
      * Source Data IP Prefix
      */
@@ -5700,6 +5716,10 @@ export interface ConfigurationGroupDevice {
      * Device ID
      */
     id?: string;
+    /**
+     * Topology label for dual device configuration group (supported from version 20.18.1 onwards)
+     */
+    topologyLabel?: string;
     /**
      * List of variables
      */
@@ -5961,7 +5981,7 @@ export interface CustomControlTopologyPolicyDefinitionSequenceMatchEntry {
      */
     regionListId?: string;
     /**
-     * Role, Attribute conditional on `type` being equal to `regionId`
+     * Role, Attribute conditional on `type` being equal to `role`
      *   - Choices: `border-router`, `edge-router`
      */
     role?: string;
@@ -6498,10 +6518,14 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequence {
     sequenceName: string;
 }
 export interface GetApplicationPriorityTrafficPolicyPolicySequenceAction {
+    appqoeDreOptimization: boolean;
+    appqoeServiceNodeGroup: string;
+    appqoeTcpOptimization: boolean;
     /**
      * Backup SLA perferred color
      */
     backupSlaPreferredColors: string[];
+    cflowd: boolean;
     cloudProbe: boolean;
     cloudSaas: boolean;
     count: string;
@@ -6518,6 +6542,8 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceAction {
     redirectDnsField: string;
     redirectDnsValue: string;
     secureInternetGateway: boolean;
+    secureServiceEdge: boolean;
+    secureServiceEdgeInstance: string;
     setParameters: outputs.GetApplicationPriorityTrafficPolicyPolicySequenceActionSetParameter[];
     /**
      * slaClass
@@ -6529,14 +6555,14 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceActionSetParam
     forwardingClassListId: string;
     localTlocListColors: string[];
     localTlocListEncapsulation: string;
-    localTlocListRestrict: string;
+    localTlocListRestrict: boolean;
     nextHopIpv4: string;
     nextHopIpv6: string;
     nextHopLoose: boolean;
     policerId: string;
     preferredColorGroupId: string;
-    preferredRemoteColorIds: string[];
-    preferredRemoteColorRestrict: string;
+    preferredRemoteColorRestrict: boolean;
+    preferredRemoteColors: string[];
     serviceChainFallbackToRouting: boolean;
     serviceChainLocal: boolean;
     serviceChainTlocColors: string[];
@@ -6545,17 +6571,19 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceActionSetParam
     serviceChainTlocListId: string;
     serviceChainType: string;
     serviceChainVpn: number;
+    serviceLocal: boolean;
+    serviceRestrict: boolean;
     serviceTlocColors: string[];
     serviceTlocEncapsulation: string;
     serviceTlocIp: string;
     serviceTlocListId: string;
     serviceType: string;
-    serviceVpn: string;
+    serviceVpn: number;
     tlocColors: string[];
     tlocEncapsulation: string;
     tlocIp: string;
     tlocListId: string;
-    vpn: string;
+    vpn: number;
 }
 export interface GetApplicationPriorityTrafficPolicyPolicySequenceActionSlaClass {
     fallbackToBestPath: boolean;
@@ -6592,9 +6620,9 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
     dns: string;
     dnsApplicationListId: string;
     /**
-     * DSCP number
+     * DSCP numbers
      */
-    dscp: number;
+    dscps: number[];
     /**
      * ICMP6 Message
      */
@@ -6616,8 +6644,8 @@ export interface GetApplicationPriorityTrafficPolicyPolicySequenceMatchEntry {
      * M365 Service Area
      */
     serviceAreas: string[];
-    sourceDataIpv4PrefxListId: string;
-    sourceDataIpv6PrefxListId: string;
+    sourceDataIpv4PrefixListId: string;
+    sourceDataIpv6PrefixListId: string;
     /**
      * Source Data IP Prefix
      */
@@ -11465,6 +11493,10 @@ export interface GetConfigurationGroupDevice {
      * Device ID
      */
     id: string;
+    /**
+     * Topology label for dual device configuration group (supported from version 20.18.1 onwards)
+     */
+    topologyLabel: string;
     /**
      * List of variables
      */
@@ -13866,6 +13898,14 @@ export interface GetServiceLanVpnFeatureAdvertiseOmpIpv6Prefix {
      * Variable name
      */
     prefixVariable: string;
+    /**
+     * Applied to Region
+     */
+    region: string;
+    /**
+     * Variable name
+     */
+    regionVariable: string;
 }
 export interface GetServiceLanVpnFeatureGreRoute {
     /**
@@ -13962,6 +14002,14 @@ export interface GetServiceLanVpnFeatureIpv4ImportRouteTarget {
     routeTargetVariable: string;
 }
 export interface GetServiceLanVpnFeatureIpv4StaticRoute {
+    /**
+     * Gateway distance
+     */
+    administrativeDistance: number;
+    /**
+     * Variable name
+     */
+    administrativeDistanceVariable: string;
     /**
      * IPv4 Route Gateway DHCP
      */
@@ -13970,6 +14018,7 @@ export interface GetServiceLanVpnFeatureIpv4StaticRoute {
      * Gateway type
      */
     gateway: string;
+    ipStaticRouteInterfaces: outputs.GetServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterface[];
     /**
      * IP Address
      */
@@ -14003,6 +14052,32 @@ export interface GetServiceLanVpnFeatureIpv4StaticRoute {
      */
     vpn: boolean;
 }
+export interface GetServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterface {
+    interfaceName: string;
+    /**
+     * Variable name
+     */
+    interfaceNameVariable: string;
+    nextHops: outputs.GetServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterfaceNextHop[];
+}
+export interface GetServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterfaceNextHop {
+    /**
+     * IPv4 Address
+     */
+    address: string;
+    /**
+     * Variable name
+     */
+    addressVariable: string;
+    /**
+     * Administrative distance
+     */
+    administrativeDistance: number;
+    /**
+     * Variable name
+     */
+    administrativeDistanceVariable: string;
+}
 export interface GetServiceLanVpnFeatureIpv4StaticRouteNextHop {
     /**
      * Address
@@ -14065,6 +14140,7 @@ export interface GetServiceLanVpnFeatureIpv6StaticRoute {
      * Gateway type
      */
     gateway: string;
+    ipv6StaticRouteInterfaces: outputs.GetServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterface[];
     /**
      * IPv6 Nat
      */
@@ -14090,6 +14166,32 @@ export interface GetServiceLanVpnFeatureIpv6StaticRoute {
      */
     prefixVariable: string;
 }
+export interface GetServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterface {
+    interfaceName: string;
+    /**
+     * Variable name
+     */
+    interfaceNameVariable: string;
+    nextHops: outputs.GetServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterfaceNextHop[];
+}
+export interface GetServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterfaceNextHop {
+    /**
+     * IPv6 Address
+     */
+    address: string;
+    /**
+     * Variable name
+     */
+    addressVariable: string;
+    /**
+     * Administrative distance
+     */
+    administrativeDistance: number;
+    /**
+     * Variable name
+     */
+    administrativeDistanceVariable: string;
+}
 export interface GetServiceLanVpnFeatureIpv6StaticRouteNextHop {
     /**
      * Address
@@ -14372,6 +14474,14 @@ export interface GetServiceLanVpnFeatureServiceRoute {
      * Variable name
      */
     serviceVariable: string;
+    /**
+     * SSE Instance name
+     */
+    sseInstance: string;
+    /**
+     * Variable name
+     */
+    sseInstanceVariable: string;
     /**
      * Subnet Mask
      */
@@ -14420,6 +14530,41 @@ export interface GetServiceLanVpnFeatureStaticNat {
      */
     translatedSourceIpVariable: string;
 }
+export interface GetServiceLanVpnFeatureStaticNatSubnet {
+    /**
+     * Network Prefix Length
+     */
+    prefixLength: number;
+    /**
+     * Variable name
+     */
+    prefixLengthVariable: string;
+    /**
+     * Source IP Subnet
+     */
+    sourceIpSubnet: string;
+    /**
+     * Variable name
+     */
+    sourceIpSubnetVariable: string;
+    /**
+     * Static NAT Direction
+     */
+    staticNatDirection: string;
+    /**
+     * Variable name
+     */
+    staticNatDirectionVariable: string;
+    trackerObjectId: string;
+    /**
+     * Translated Source IP Subnet
+     */
+    translatedSourceIpSubnet: string;
+    /**
+     * Variable name
+     */
+    translatedSourceIpSubnetVariable: string;
+}
 export interface GetServiceLanVpnInterfaceEthernetFeatureArp {
     /**
      * IPV4 Address
@@ -15698,18 +15843,26 @@ export interface GetServiceRoutingBgpFeatureIpv6Neighbor {
 }
 export interface GetServiceRoutingBgpFeatureIpv6NeighborAddressFamily {
     /**
-     * Set IPv6 unicast address family
+     * Set maximum number of prefixes accepted from BGP peer
      */
-    familyType: string;
-    inRoutePolicyId: string;
+    disablePeerMaxNumberOfPrefixes: number;
     /**
-     * Set maximum number of prefixes accepted from BGP peer
+     * Variable name
+     */
+    disablePeerMaxNumberOfPrefixesVariable: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message
      */
-    maxNumberOfPrefixes: number;
+    disablePeerThreshold: number;
     /**
      * Variable name
      */
-    maxNumberOfPrefixesVariable: string;
+    disablePeerThresholdVariable: string;
+    /**
+     * Set IPv6 unicast address family
+     */
+    familyType: string;
+    inRoutePolicyId: string;
     outRoutePolicyId: string;
     /**
      * Neighbor received maximum prefix policy is disabled.
@@ -15723,14 +15876,38 @@ export interface GetServiceRoutingBgpFeatureIpv6NeighborAddressFamily {
      * Variable name
      */
     restartIntervalVariable: string;
+    /**
+     * Set maximum number of prefixes accepted from BGP peer
+     */
+    restartMaxNumberOfPrefixes: number;
+    /**
+     * Variable name
+     */
+    restartMaxNumberOfPrefixesVariable: string;
     /**
      * Set threshold(1 to 100) at which to generate a warning message
      */
-    threshold: number;
+    restartThreshold: number;
     /**
      * Variable name
      */
-    thresholdVariable: string;
+    restartThresholdVariable: string;
+    /**
+     * Set maximum number of prefixes accepted from BGP peer
+     */
+    warningMessageMaxNumberOfPrefixes: number;
+    /**
+     * Variable name
+     */
+    warningMessageMaxNumberOfPrefixesVariable: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message
+     */
+    warningMessageThreshold: number;
+    /**
+     * Variable name
+     */
+    warningMessageThresholdVariable: string;
 }
 export interface GetServiceRoutingBgpFeatureIpv6Network {
     /**
@@ -16041,7 +16218,7 @@ export interface GetServiceRoutingOspfv3Ipv4FeatureArea {
      */
     areaNumberVariable: string;
     /**
-     * stub area type
+     * Set OSPFv3 area type
      */
     areaType: string;
     /**
@@ -16079,7 +16256,7 @@ export interface GetServiceRoutingOspfv3Ipv4FeatureAreaInterface {
      */
     authenticationSpiVariable: string;
     /**
-     * No Authentication by default
+     * Set OSPF interface authentication configuration
      */
     authenticationType: string;
     /**
@@ -16186,9 +16363,13 @@ export interface GetServiceRoutingOspfv3Ipv4FeatureRedistribute {
     protocolVariable: string;
     routePolicyId: string;
     /**
-     * Translate Rib Metric
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network.
      */
     translateRibMetric: boolean;
+    /**
+     * Variable name
+     */
+    translateRibMetricVariable: string;
 }
 export interface GetServiceRoutingOspfv3Ipv6FeatureArea {
     /**
@@ -16208,7 +16389,7 @@ export interface GetServiceRoutingOspfv3Ipv6FeatureArea {
      */
     areaNumberVariable: string;
     /**
-     * stub area type
+     * Set OSPFv3 area type
      */
     areaType: string;
     /**
@@ -16246,7 +16427,7 @@ export interface GetServiceRoutingOspfv3Ipv6FeatureAreaInterface {
      */
     authenticationSpiVariable: string;
     /**
-     * No Authentication by default
+     * Set OSPF interface authentication configuration
      */
     authenticationType: string;
     /**
@@ -16343,9 +16524,13 @@ export interface GetServiceRoutingOspfv3Ipv6FeatureRedistribute {
     protocolVariable: string;
     routePolicyId: string;
     /**
-     * Translate Rib Metric
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network.
      */
     translateRibMetric: boolean;
+    /**
+     * Variable name
+     */
+    translateRibMetricVariable: string;
 }
 export interface GetServiceSwitchportFeatureInterface {
     /**
@@ -17158,6 +17343,16 @@ export interface GetSystemBfdFeatureColor {
      */
     pmtuDiscoveryVariable: string;
 }
+export interface GetSystemCaCertificateFeatureCertificate {
+    /**
+     * UUID of Certificate Record in Database
+     */
+    caCertificateId: string;
+    /**
+     * Trust Point Name of Certificate
+     */
+    trustPointName: string;
+}
 export interface GetSystemIpv4DeviceAccessFeatureSequence {
     /**
      * Base Action
@@ -19021,18 +19216,26 @@ export interface GetTransportRoutingBgpFeatureIpv6Neighbor {
 }
 export interface GetTransportRoutingBgpFeatureIpv6NeighborAddressFamily {
     /**
-     * Set IPv6 unicast address family
+     * Set maximum number of prefixes accepted from BGP peer
      */
-    familyType: string;
-    inRoutePolicyId: string;
+    disablePeerMaxNumberOfPrefixes: number;
     /**
-     * Set maximum number of prefixes accepted from BGP peer
+     * Variable name
+     */
+    disablePeerMaxNumberOfPrefixesVariable: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message
      */
-    maxNumberOfPrefixes: number;
+    disablePeerThreshold: number;
     /**
      * Variable name
      */
-    maxNumberOfPrefixesVariable: string;
+    disablePeerThresholdVariable: string;
+    /**
+     * Set IPv6 unicast address family
+     */
+    familyType: string;
+    inRoutePolicyId: string;
     outRoutePolicyId: string;
     /**
      * Neighbor received maximum prefix policy is disabled.
@@ -19046,14 +19249,38 @@ export interface GetTransportRoutingBgpFeatureIpv6NeighborAddressFamily {
      * Variable name
      */
     restartIntervalVariable: string;
+    /**
+     * Set maximum number of prefixes accepted from BGP peer
+     */
+    restartMaxNumberOfPrefixes: number;
+    /**
+     * Variable name
+     */
+    restartMaxNumberOfPrefixesVariable: string;
     /**
      * Set threshold(1 to 100) at which to generate a warning message
      */
-    threshold: number;
+    restartThreshold: number;
     /**
      * Variable name
      */
-    thresholdVariable: string;
+    restartThresholdVariable: string;
+    /**
+     * Set maximum number of prefixes accepted from BGP peer
+     */
+    warningMessageMaxNumberOfPrefixes: number;
+    /**
+     * Variable name
+     */
+    warningMessageMaxNumberOfPrefixesVariable: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message
+     */
+    warningMessageThreshold: number;
+    /**
+     * Variable name
+     */
+    warningMessageThresholdVariable: string;
 }
 export interface GetTransportRoutingBgpFeatureIpv6Network {
     /**
@@ -19291,7 +19518,7 @@ export interface GetTransportRoutingOspfv3Ipv4FeatureArea {
      */
     areaNumberVariable: string;
     /**
-     * stub area type
+     * Set OSPFv3 area type
      */
     areaType: string;
     /**
@@ -19329,7 +19556,7 @@ export interface GetTransportRoutingOspfv3Ipv4FeatureAreaInterface {
      */
     authenticationSpiVariable: string;
     /**
-     * No Authentication by default
+     * Set OSPF interface authentication configuration
      */
     authenticationType: string;
     /**
@@ -19435,6 +19662,14 @@ export interface GetTransportRoutingOspfv3Ipv4FeatureRedistribute {
      */
     protocolVariable: string;
     routePolicyId: string;
+    /**
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network.
+     */
+    translateRibMetric: boolean;
+    /**
+     * Variable name
+     */
+    translateRibMetricVariable: string;
 }
 export interface GetTransportRoutingOspfv3Ipv6FeatureArea {
     /**
@@ -19454,7 +19689,7 @@ export interface GetTransportRoutingOspfv3Ipv6FeatureArea {
      */
     areaNumberVariable: string;
     /**
-     * stub area type
+     * Set OSPFv3 area type
      */
     areaType: string;
     /**
@@ -19492,7 +19727,7 @@ export interface GetTransportRoutingOspfv3Ipv6FeatureAreaInterface {
      */
     authenticationSpiVariable: string;
     /**
-     * No Authentication by default
+     * Set OSPF interface authentication configuration
      */
     authenticationType: string;
     /**
@@ -19588,6 +19823,14 @@ export interface GetTransportRoutingOspfv3Ipv6FeatureRedistribute {
      */
     protocolVariable: string;
     routePolicyId: string;
+    /**
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network.
+     */
+    translateRibMetric: boolean;
+    /**
+     * Variable name
+     */
+    translateRibMetricVariable: string;
 }
 export interface GetTransportT1E1ControllerFeatureEntry {
     /**
@@ -21469,6 +21712,10 @@ export interface GetZoneBasedFirewallPolicyDefinitionRuleMatchEntry {
      * policy id for selected match entry
      */
     policyId: string;
+    /**
+     * Policy version
+     */
+    policyVersion: string;
     /**
      * Should be included with additionally entries for `destinationPort` and `protocol` whenever the type `protocolName` is used.
      */
@@ -23480,14 +23727,24 @@ export interface ServiceLanVpnFeatureAdvertiseOmpIpv6Prefix {
      * Variable name
      */
     prefixVariable?: string;
-}
-export interface ServiceLanVpnFeatureGreRoute {
     /**
-     * Variable name
+     * Applied to Region
+     *   - Choices: `core-and-access`, `core`, `access`
+     *   - Default value: `core-and-access`
      */
-    interfaceVariable?: string;
+    region?: string;
     /**
-     * Interface
+     * Variable name
+     */
+    regionVariable?: string;
+}
+export interface ServiceLanVpnFeatureGreRoute {
+    /**
+     * Variable name
+     */
+    interfaceVariable?: string;
+    /**
+     * Interface
      */
     interfaces?: string[];
     /**
@@ -23578,15 +23835,28 @@ export interface ServiceLanVpnFeatureIpv4ImportRouteTarget {
     routeTargetVariable?: string;
 }
 export interface ServiceLanVpnFeatureIpv4StaticRoute {
+    /**
+     * Gateway distance, Attribute conditional on `gateway` being equal to `null0`
+     *   - Range: `1`-`255`
+     */
+    administrativeDistance?: number;
+    /**
+     * Variable name, Attribute conditional on `gateway` being equal to `null0`
+     */
+    administrativeDistanceVariable?: string;
     /**
      * IPv4 Route Gateway DHCP, Attribute conditional on `gateway` being equal to `dhcp`
      */
     dhcp?: boolean;
     /**
      * Gateway type
-     *   - Choices: `nextHop`, `null0`, `vpn`, `dhcp`
+     *   - Choices: `nextHop`, `null0`, `vpn`, `dhcp`, `staticRouteInterface`
      */
     gateway?: string;
+    /**
+     * , Attribute conditional on `gateway` being equal to `staticRouteInterface`
+     */
+    ipStaticRouteInterfaces?: outputs.ServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterface[];
     /**
      * IP Address
      */
@@ -23621,6 +23891,33 @@ export interface ServiceLanVpnFeatureIpv4StaticRoute {
      */
     vpn?: boolean;
 }
+export interface ServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterface {
+    interfaceName?: string;
+    /**
+     * Variable name
+     */
+    interfaceNameVariable?: string;
+    nextHops?: outputs.ServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterfaceNextHop[];
+}
+export interface ServiceLanVpnFeatureIpv4StaticRouteIpStaticRouteInterfaceNextHop {
+    /**
+     * IPv4 Address
+     */
+    address?: string;
+    /**
+     * Variable name
+     */
+    addressVariable?: string;
+    /**
+     * Administrative distance
+     *   - Range: `1`-`255`
+     */
+    administrativeDistance?: number;
+    /**
+     * Variable name
+     */
+    administrativeDistanceVariable?: string;
+}
 export interface ServiceLanVpnFeatureIpv4StaticRouteNextHop {
     /**
      * Address
@@ -23685,9 +23982,13 @@ export interface ServiceLanVpnFeatureIpv6ImportRouteTarget {
 export interface ServiceLanVpnFeatureIpv6StaticRoute {
     /**
      * Gateway type
-     *   - Choices: `nextHop`, `null0`, `nat`
+     *   - Choices: `nextHop`, `null0`, `nat`, `staticRouteInterface`
      */
     gateway?: string;
+    /**
+     * , Attribute conditional on `gateway` being equal to `staticRouteInterface`
+     */
+    ipv6StaticRouteInterfaces?: outputs.ServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterface[];
     /**
      * IPv6 Nat, Attribute conditional on `gateway` being equal to `nat`
      *   - Choices: `NAT64`, `NAT66`
@@ -23714,6 +24015,33 @@ export interface ServiceLanVpnFeatureIpv6StaticRoute {
      */
     prefixVariable?: string;
 }
+export interface ServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterface {
+    interfaceName?: string;
+    /**
+     * Variable name
+     */
+    interfaceNameVariable?: string;
+    nextHops?: outputs.ServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterfaceNextHop[];
+}
+export interface ServiceLanVpnFeatureIpv6StaticRouteIpv6StaticRouteInterfaceNextHop {
+    /**
+     * IPv6 Address
+     */
+    address?: string;
+    /**
+     * Variable name
+     */
+    addressVariable?: string;
+    /**
+     * Administrative distance
+     *   - Range: `1`-`254`
+     */
+    administrativeDistance?: number;
+    /**
+     * Variable name
+     */
+    administrativeDistanceVariable?: string;
+}
 export interface ServiceLanVpnFeatureIpv6StaticRouteNextHop {
     /**
      * Address
@@ -23799,7 +24127,7 @@ export interface ServiceLanVpnFeatureNatPool {
     overloadVariable?: string;
     /**
      * NAT Pool Prefix Length
-     *   - Range: `1`-`32`
+     *   - Range: `1`-`30`
      */
     prefixLength?: number;
     /**
@@ -23853,6 +24181,7 @@ export interface ServiceLanVpnFeatureNatPortForward {
     sourceIpVariable?: string;
     /**
      * Source Port
+     *   - Range: `0`-`65535`
      */
     sourcePort?: number;
     /**
@@ -23861,6 +24190,7 @@ export interface ServiceLanVpnFeatureNatPortForward {
     sourcePortVariable?: string;
     /**
      * Translate Port
+     *   - Range: `0`-`65535`
      */
     translatePort?: number;
     /**
@@ -24008,7 +24338,7 @@ export interface ServiceLanVpnFeatureServiceRoute {
     networkAddressVariable?: string;
     /**
      * Service
-     *   - Choices: `SIG`
+     *   - Choices: `SIG`, `SSE`
      *   - Default value: `SIG`
      */
     service?: string;
@@ -24016,6 +24346,14 @@ export interface ServiceLanVpnFeatureServiceRoute {
      * Variable name
      */
     serviceVariable?: string;
+    /**
+     * SSE Instance name
+     */
+    sseInstance?: string;
+    /**
+     * Variable name
+     */
+    sseInstanceVariable?: string;
     /**
      * Subnet Mask
      *   - Choices: `255.255.255.255`, `255.255.255.254`, `255.255.255.252`, `255.255.255.248`, `255.255.255.240`, `255.255.255.224`, `255.255.255.192`, `255.255.255.128`, `255.255.255.0`, `255.255.254.0`, `255.255.252.0`, `255.255.248.0`, `255.255.240.0`, `255.255.224.0`, `255.255.192.0`, `255.255.128.0`, `255.255.0.0`, `255.254.0.0`, `255.252.0.0`, `255.240.0.0`, `255.224.0.0`, `255.192.0.0`, `255.128.0.0`, `255.0.0.0`, `254.0.0.0`, `252.0.0.0`, `248.0.0.0`, `240.0.0.0`, `224.0.0.0`, `192.0.0.0`, `128.0.0.0`, `0.0.0.0`
@@ -24067,6 +24405,43 @@ export interface ServiceLanVpnFeatureStaticNat {
      */
     translatedSourceIpVariable?: string;
 }
+export interface ServiceLanVpnFeatureStaticNatSubnet {
+    /**
+     * Network Prefix Length
+     *   - Range: `1`-`32`
+     */
+    prefixLength?: number;
+    /**
+     * Variable name
+     */
+    prefixLengthVariable?: string;
+    /**
+     * Source IP Subnet
+     */
+    sourceIpSubnet?: string;
+    /**
+     * Variable name
+     */
+    sourceIpSubnetVariable?: string;
+    /**
+     * Static NAT Direction
+     *   - Choices: `inside`, `outside`
+     */
+    staticNatDirection?: string;
+    /**
+     * Variable name
+     */
+    staticNatDirectionVariable?: string;
+    trackerObjectId?: string;
+    /**
+     * Translated Source IP Subnet
+     */
+    translatedSourceIpSubnet?: string;
+    /**
+     * Variable name
+     */
+    translatedSourceIpSubnetVariable?: string;
+}
 export interface ServiceLanVpnInterfaceEthernetFeatureArp {
     /**
      * IPV4 Address
@@ -25471,43 +25846,82 @@ export interface ServiceRoutingBgpFeatureIpv6Neighbor {
 }
 export interface ServiceRoutingBgpFeatureIpv6NeighborAddressFamily {
     /**
-     * Set IPv6 unicast address family
+     * Set maximum number of prefixes accepted from BGP peer, Attribute conditional on `policyType` being equal to `disable-peer`
+     *   - Range: `1`-`4294967295`
      */
-    familyType?: string;
-    inRoutePolicyId?: string;
+    disablePeerMaxNumberOfPrefixes?: number;
     /**
-     * Set maximum number of prefixes accepted from BGP peer
-     *   - Range: `1`-`4294967295`
+     * Variable name, Attribute conditional on `policyType` being equal to `disable-peer`
      */
-    maxNumberOfPrefixes?: number;
+    disablePeerMaxNumberOfPrefixesVariable?: string;
     /**
-     * Variable name
+     * Set threshold(1 to 100) at which to generate a warning message, Attribute conditional on `policyType` being equal to `disable-peer`
+     *   - Range: `1`-`100`
+     *   - Default value: `75`
+     */
+    disablePeerThreshold?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `disable-peer`
+     */
+    disablePeerThresholdVariable?: string;
+    /**
+     * Set IPv6 unicast address family
      */
-    maxNumberOfPrefixesVariable?: string;
+    familyType?: string;
+    inRoutePolicyId?: string;
     outRoutePolicyId?: string;
     /**
      * Neighbor received maximum prefix policy is disabled.
+     *   - Choices: `restart`, `off`, `warning-only`, `disable-peer`
      */
     policyType?: string;
     /**
-     * Set the restart interval(minutes) when to restart BGP connection if threshold is exceeded
+     * Set the restart interval(minutes) when to restart BGP connection if threshold is exceeded, Attribute conditional on `policyType` being equal to `restart`
      *   - Range: `1`-`65535`
      */
     restartInterval?: number;
     /**
-     * Variable name
+     * Variable name, Attribute conditional on `policyType` being equal to `restart`
      */
     restartIntervalVariable?: string;
     /**
-     * Set threshold(1 to 100) at which to generate a warning message
+     * Set maximum number of prefixes accepted from BGP peer, Attribute conditional on `policyType` being equal to `restart`
+     *   - Range: `1`-`4294967295`
+     */
+    restartMaxNumberOfPrefixes?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `restart`
+     */
+    restartMaxNumberOfPrefixesVariable?: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message, Attribute conditional on `policyType` being equal to `restart`
      *   - Range: `1`-`100`
      *   - Default value: `75`
      */
-    threshold?: number;
+    restartThreshold?: number;
     /**
-     * Variable name
+     * Variable name, Attribute conditional on `policyType` being equal to `restart`
      */
-    thresholdVariable?: string;
+    restartThresholdVariable?: string;
+    /**
+     * Set maximum number of prefixes accepted from BGP peer, Attribute conditional on `policyType` being equal to `warning-only`
+     *   - Range: `1`-`4294967295`
+     */
+    warningMessageMaxNumberOfPrefixes?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `warning-only`
+     */
+    warningMessageMaxNumberOfPrefixesVariable?: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message, Attribute conditional on `policyType` being equal to `warning-only`
+     *   - Range: `1`-`100`
+     *   - Default value: `75`
+     */
+    warningMessageThreshold?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `warning-only`
+     */
+    warningMessageThresholdVariable?: string;
 }
 export interface ServiceRoutingBgpFeatureIpv6Network {
     /**
@@ -25855,8 +26269,8 @@ export interface ServiceRoutingOspfv3Ipv4FeatureArea {
      */
     areaNumberVariable?: string;
     /**
-     * stub area type
-     *   - Choices: `stub`
+     * Set OSPFv3 area type
+     *   - Choices: `stub`, `nssa`, `normal`
      */
     areaType?: string;
     /**
@@ -25895,8 +26309,8 @@ export interface ServiceRoutingOspfv3Ipv4FeatureAreaInterface {
      */
     authenticationSpiVariable?: string;
     /**
-     * No Authentication by default
-     *   - Choices: `no-auth`
+     * Set OSPF interface authentication configuration
+     *   - Choices: `no-auth`, `ipsec-sha1`
      */
     authenticationType?: string;
     /**
@@ -26019,10 +26433,14 @@ export interface ServiceRoutingOspfv3Ipv4FeatureRedistribute {
     protocolVariable?: string;
     routePolicyId?: string;
     /**
-     * Translate Rib Metric, Attribute conditional on `protocol` being equal to `omp`
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network., Attribute conditional on `protocol` being equal to `omp`
      *   - Default value: `false`
      */
     translateRibMetric?: boolean;
+    /**
+     * Variable name, Attribute conditional on `protocol` being equal to `omp`
+     */
+    translateRibMetricVariable?: string;
 }
 export interface ServiceRoutingOspfv3Ipv6FeatureArea {
     /**
@@ -26043,8 +26461,8 @@ export interface ServiceRoutingOspfv3Ipv6FeatureArea {
      */
     areaNumberVariable?: string;
     /**
-     * stub area type
-     *   - Choices: `stub`
+     * Set OSPFv3 area type
+     *   - Choices: `stub`, `nssa`, `normal`
      */
     areaType?: string;
     /**
@@ -26083,8 +26501,8 @@ export interface ServiceRoutingOspfv3Ipv6FeatureAreaInterface {
      */
     authenticationSpiVariable?: string;
     /**
-     * No Authentication by default
-     *   - Choices: `no-auth`
+     * Set OSPF interface authentication configuration
+     *   - Choices: `no-auth`, `ipsec-sha1`
      */
     authenticationType?: string;
     /**
@@ -26193,10 +26611,14 @@ export interface ServiceRoutingOspfv3Ipv6FeatureRedistribute {
     protocolVariable?: string;
     routePolicyId?: string;
     /**
-     * Translate Rib Metric, Attribute conditional on `protocol` being equal to `omp`
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network., Attribute conditional on `protocol` being equal to `omp`
      *   - Default value: `false`
      */
     translateRibMetric?: boolean;
+    /**
+     * Variable name, Attribute conditional on `protocol` being equal to `omp`
+     */
+    translateRibMetricVariable?: string;
 }
 export interface ServiceSwitchportFeatureInterface {
     /**
@@ -27099,6 +27521,16 @@ export interface SystemBfdFeatureColor {
      */
     pmtuDiscoveryVariable?: string;
 }
+export interface SystemCaCertificateFeatureCertificate {
+    /**
+     * UUID of Certificate Record in Database
+     */
+    caCertificateId?: string;
+    /**
+     * Trust Point Name of Certificate
+     */
+    trustPointName?: string;
+}
 export interface SystemIpv4DeviceAccessFeatureSequence {
     /**
      * Base Action
@@ -29133,44 +29565,83 @@ export interface TransportRoutingBgpFeatureIpv6Neighbor {
 }
 export interface TransportRoutingBgpFeatureIpv6NeighborAddressFamily {
     /**
-     * Set IPv6 unicast address family
-     *   - Choices: `ipv6-unicast`, `vpnv6-unicast`
+     * Set maximum number of prefixes accepted from BGP peer, Attribute conditional on `policyType` being equal to `disable-peer`
+     *   - Range: `1`-`4294967295`
      */
-    familyType?: string;
-    inRoutePolicyId?: string;
+    disablePeerMaxNumberOfPrefixes?: number;
     /**
-     * Set maximum number of prefixes accepted from BGP peer
-     *   - Range: `1`-`4294967295`
+     * Variable name, Attribute conditional on `policyType` being equal to `disable-peer`
      */
-    maxNumberOfPrefixes?: number;
+    disablePeerMaxNumberOfPrefixesVariable?: string;
     /**
-     * Variable name
+     * Set threshold(1 to 100) at which to generate a warning message, Attribute conditional on `policyType` being equal to `disable-peer`
+     *   - Range: `1`-`100`
+     *   - Default value: `75`
      */
-    maxNumberOfPrefixesVariable?: string;
+    disablePeerThreshold?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `disable-peer`
+     */
+    disablePeerThresholdVariable?: string;
+    /**
+     * Set IPv6 unicast address family
+     *   - Choices: `ipv6-unicast`, `vpnv6-unicast`
+     */
+    familyType?: string;
+    inRoutePolicyId?: string;
     outRoutePolicyId?: string;
     /**
      * Neighbor received maximum prefix policy is disabled.
+     *   - Choices: `restart`, `off`, `warning-only`, `disable-peer`
      */
     policyType?: string;
     /**
-     * Set the restart interval(minutes) when to restart BGP connection if threshold is exceeded
+     * Set the restart interval(minutes) when to restart BGP connection if threshold is exceeded, Attribute conditional on `policyType` being equal to `restart`
      *   - Range: `1`-`65535`
      */
     restartInterval?: number;
     /**
-     * Variable name
+     * Variable name, Attribute conditional on `policyType` being equal to `restart`
      */
     restartIntervalVariable?: string;
     /**
-     * Set threshold(1 to 100) at which to generate a warning message
+     * Set maximum number of prefixes accepted from BGP peer, Attribute conditional on `policyType` being equal to `restart`
+     *   - Range: `1`-`4294967295`
+     */
+    restartMaxNumberOfPrefixes?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `restart`
+     */
+    restartMaxNumberOfPrefixesVariable?: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message, Attribute conditional on `policyType` being equal to `restart`
      *   - Range: `1`-`100`
      *   - Default value: `75`
      */
-    threshold?: number;
+    restartThreshold?: number;
     /**
-     * Variable name
+     * Variable name, Attribute conditional on `policyType` being equal to `restart`
      */
-    thresholdVariable?: string;
+    restartThresholdVariable?: string;
+    /**
+     * Set maximum number of prefixes accepted from BGP peer, Attribute conditional on `policyType` being equal to `warning-only`
+     *   - Range: `1`-`4294967295`
+     */
+    warningMessageMaxNumberOfPrefixes?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `warning-only`
+     */
+    warningMessageMaxNumberOfPrefixesVariable?: string;
+    /**
+     * Set threshold(1 to 100) at which to generate a warning message, Attribute conditional on `policyType` being equal to `warning-only`
+     *   - Range: `1`-`100`
+     *   - Default value: `75`
+     */
+    warningMessageThreshold?: number;
+    /**
+     * Variable name, Attribute conditional on `policyType` being equal to `warning-only`
+     */
+    warningMessageThresholdVariable?: string;
 }
 export interface TransportRoutingBgpFeatureIpv6Network {
     /**
@@ -29434,8 +29905,8 @@ export interface TransportRoutingOspfv3Ipv4FeatureArea {
      */
     areaNumberVariable?: string;
     /**
-     * stub area type
-     *   - Choices: `stub`
+     * Set OSPFv3 area type
+     *   - Choices: `stub`, `nssa`, `normal`
      */
     areaType?: string;
     /**
@@ -29474,8 +29945,8 @@ export interface TransportRoutingOspfv3Ipv4FeatureAreaInterface {
      */
     authenticationSpiVariable?: string;
     /**
-     * No Authentication by default
-     *   - Choices: `no-auth`
+     * Set OSPF interface authentication configuration
+     *   - Choices: `no-auth`, `ipsec-sha1`
      */
     authenticationType?: string;
     /**
@@ -29597,6 +30068,15 @@ export interface TransportRoutingOspfv3Ipv4FeatureRedistribute {
      */
     protocolVariable?: string;
     routePolicyId?: string;
+    /**
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network., Attribute conditional on `protocol` being equal to `omp`
+     *   - Default value: `false`
+     */
+    translateRibMetric?: boolean;
+    /**
+     * Variable name, Attribute conditional on `protocol` being equal to `omp`
+     */
+    translateRibMetricVariable?: string;
 }
 export interface TransportRoutingOspfv3Ipv6FeatureArea {
     /**
@@ -29617,8 +30097,8 @@ export interface TransportRoutingOspfv3Ipv6FeatureArea {
      */
     areaNumberVariable?: string;
     /**
-     * stub area type
-     *   - Choices: `stub`
+     * Set OSPFv3 area type
+     *   - Choices: `stub`, `nssa`, `normal`
      */
     areaType?: string;
     /**
@@ -29657,8 +30137,8 @@ export interface TransportRoutingOspfv3Ipv6FeatureAreaInterface {
      */
     authenticationSpiVariable?: string;
     /**
-     * No Authentication by default
-     *   - Choices: `no-auth`
+     * Set OSPF interface authentication configuration
+     *   - Choices: `no-auth`, `ipsec-sha1`
      */
     authenticationType?: string;
     /**
@@ -29766,6 +30246,15 @@ export interface TransportRoutingOspfv3Ipv6FeatureRedistribute {
      */
     protocolVariable?: string;
     routePolicyId?: string;
+    /**
+     * Devices within the Cisco Catalyst SD-WAN overlay network use OMP for control plane information. Outside of the overlay, devices use other control plane protocols such as BGP or OSPF. A device at the interface between devices within the overlay network and devices outside of the overlay can translate OMP route metrics when redistributing routes to BGP or OSPF, to be usable by devices outside the overlay network., Attribute conditional on `protocol` being equal to `omp`
+     *   - Default value: `false`
+     */
+    translateRibMetric?: boolean;
+    /**
+     * Variable name, Attribute conditional on `protocol` being equal to `omp`
+     */
+    translateRibMetricVariable?: string;
 }
 export interface TransportT1E1ControllerFeatureEntry {
     /**
@@ -29989,6 +30478,7 @@ export interface TransportWanVpnFeatureIpv6StaticRouteNextHop {
     /**
      * Administrative distance
      *   - Range: `1`-`254`
+     *   - Default value: `1`
      */
     administrativeDistance?: number;
     /**
@@ -31783,6 +32273,10 @@ export interface ZoneBasedFirewallPolicyDefinitionRuleMatchEntry {
      * policy id for selected match entry
      */
     policyId?: string;
+    /**
+     * Policy version
+     */
+    policyVersion?: string;
     /**
      * Should be included with additionally entries for `destinationPort` and `protocol` whenever the type `protocolName` is used.
      */